ByteOS Network

CVE Vulnerability Details :

CVE-2010-2939

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-17 Aug, 2010 | 17:31

Updated At-07 Aug, 2024 | 02:55

▼CVE Numbering Authority (CNA)

Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to this as a use-after-free issue.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793	vendor-advisory x_refsource_SLACKWARE
http://www.mail-archive.com/openssl-dev%40openssl.org/msg28049.html	mailing-list x_refsource_MLIST
http://marc.info/?l=bugtraq&m=130331363227777&w=2	vendor-advisory x_refsource_HP
http://secunia.com/advisories/42413	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/40906	third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2010/dsa-2100	vendor-advisory x_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2010/08/11/6	mailing-list x_refsource_MLIST
http://seclists.org/fulldisclosure/2010/Aug/84	mailing-list x_refsource_FULLDISC
http://www.vupen.com/english/advisories/2010/2229	vdb-entry x_refsource_VUPEN
http://www.vupen.com/english/advisories/2010/2038	vdb-entry x_refsource_VUPEN
http://securitytracker.com/id?1024296	vdb-entry x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-1003-1	vendor-advisory x_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=130331363227777&w=2	vendor-advisory x_refsource_HP
http://secunia.com/advisories/42309	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2010/3077	vdb-entry x_refsource_VUPEN
http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc	vendor-advisory x_refsource_FREEBSD
http://secunia.com/advisories/43312	third-party-advisory x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html	vendor-advisory x_refsource_SUSE
http://www.vmware.com/security/advisories/VMSA-2011-0003.html	x_refsource_CONFIRM
http://www.mail-archive.com/openssl-dev%40openssl.org/msg28043.html	mailing-list x_refsource_MLIST
http://www.mail-archive.com/openssl-dev%40openssl.org/msg28045.html	mailing-list x_refsource_MLIST
http://www.securityfocus.com/archive/1/516397/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://secunia.com/advisories/41105	third-party-advisory x_refsource_SECUNIA

Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793

Resource:

vendor-advisory

x_refsource_SLACKWARE

Hyperlink: http://www.mail-archive.com/openssl-dev%40openssl.org/msg28049.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://marc.info/?l=bugtraq&m=130331363227777&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://secunia.com/advisories/42413

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/40906

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.debian.org/security/2010/dsa-2100

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.openwall.com/lists/oss-security/2010/08/11/6

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://seclists.org/fulldisclosure/2010/Aug/84

Resource:

mailing-list

x_refsource_FULLDISC

Hyperlink: http://www.vupen.com/english/advisories/2010/2229

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.vupen.com/english/advisories/2010/2038

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://securitytracker.com/id?1024296

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.ubuntu.com/usn/USN-1003-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://marc.info/?l=bugtraq&m=130331363227777&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://secunia.com/advisories/42309

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2010/3077

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc

Resource:

vendor-advisory

x_refsource_FREEBSD

Hyperlink: http://secunia.com/advisories/43312

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.mail-archive.com/openssl-dev%40openssl.org/msg28043.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.mail-archive.com/openssl-dev%40openssl.org/msg28045.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.securityfocus.com/archive/1/516397/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://secunia.com/advisories/41105

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793	vendor-advisory x_refsource_SLACKWARE x_transferred
http://www.mail-archive.com/openssl-dev%40openssl.org/msg28049.html	mailing-list x_refsource_MLIST x_transferred
http://marc.info/?l=bugtraq&m=130331363227777&w=2	vendor-advisory x_refsource_HP x_transferred
http://secunia.com/advisories/42413	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/40906	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.debian.org/security/2010/dsa-2100	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.openwall.com/lists/oss-security/2010/08/11/6	mailing-list x_refsource_MLIST x_transferred
http://seclists.org/fulldisclosure/2010/Aug/84	mailing-list x_refsource_FULLDISC x_transferred
http://www.vupen.com/english/advisories/2010/2229	vdb-entry x_refsource_VUPEN x_transferred
http://www.vupen.com/english/advisories/2010/2038	vdb-entry x_refsource_VUPEN x_transferred
http://securitytracker.com/id?1024296	vdb-entry x_refsource_SECTRACK x_transferred
http://www.ubuntu.com/usn/USN-1003-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://marc.info/?l=bugtraq&m=130331363227777&w=2	vendor-advisory x_refsource_HP x_transferred
http://secunia.com/advisories/42309	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2010/3077	vdb-entry x_refsource_VUPEN x_transferred
http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc	vendor-advisory x_refsource_FREEBSD x_transferred
http://secunia.com/advisories/43312	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.vmware.com/security/advisories/VMSA-2011-0003.html	x_refsource_CONFIRM x_transferred
http://www.mail-archive.com/openssl-dev%40openssl.org/msg28043.html	mailing-list x_refsource_MLIST x_transferred
http://www.mail-archive.com/openssl-dev%40openssl.org/msg28045.html	mailing-list x_refsource_MLIST x_transferred
http://www.securityfocus.com/archive/1/516397/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://secunia.com/advisories/41105	third-party-advisory x_refsource_SECUNIA x_transferred